{"id":11463,"date":"2026-09-14T08:58:36","date_gmt":"2026-09-14T08:58:36","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=11463"},"modified":"2026-09-14T08:58:36","modified_gmt":"2026-09-14T08:58:36","slug":"comptia-sy0-701-exam-dumps-and-practice-test-questions-part-3-q41-60","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/comptia-sy0-701-exam-dumps-and-practice-test-questions-part-3-q41-60\/","title":{"rendered":"CompTIA SY0-701 Exam Dumps and Practice Test Questions \u2014 Part 3 (Q41\u201360)"},"content":{"rendered":"

View Full\u00a0CompTIA SY0-701 Exam Dumps<\/a>\u00a0and Practice Test Dumps.<\/h3>\n

 <\/p>\n

Question 41<\/b><\/h3>\n

Which security control is designed to prevent unauthorized physical access to a restricted area?<\/b><\/p>\n

    \n
  1. Firewall<\/span><\/li>\n
  2. Mantrap<\/span><\/li>\n
  3. Encryption<\/span><\/li>\n
  4. Intrusion prevention system<\/span><\/li>\n<\/ol>\n

    Correct Answer: 2<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    A mantrap is a physical security control that uses two or more interlocking doors to control access to a restricted area. Typically, one door must close before the second door can open. Mantraps help prevent unauthorized individuals from following an authorized person through a secured entrance and are commonly used in data centers and other sensitive facilities.<\/span><\/p>\n

    Question 42<\/b><\/h3>\n

    Which type of authentication factor is represented by a fingerprint scan?<\/b><\/p>\n

      \n
    1. Something you know<\/span><\/li>\n
    2. Something you have<\/span><\/li>\n
    3. Something you are<\/span><\/li>\n
    4. Somewhere you are<\/span><\/li>\n<\/ol>\n

      Correct Answer: 3<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      A fingerprint is an example of a biometric authentication factor, which is categorized as “something you are.” Biometric factors use unique physical or behavioral characteristics to verify a user’s identity. Other examples include facial recognition, iris scans, and voice recognition. Biometrics are commonly combined with other authentication factors to strengthen access controls.<\/span><\/p>\n

      Question 43<\/b><\/h3>\n

      Which security mechanism is used to verify that data has not been altered during transmission?<\/b><\/p>\n

        \n
      1. Hashing<\/span><\/li>\n
      2. Data compression<\/span><\/li>\n
      3. Steganography<\/span><\/li>\n
      4. Tokenization<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        Hashing generates a fixed-length value based on the contents of data. If the original data is modified, its resulting hash value will normally change. Comparing the calculated hash with a trusted hash can help determine whether data has been altered. Hashing is commonly used for integrity verification, password storage, and digital security applications.<\/span><\/p>\n

        Question 44<\/b><\/h3>\n

        Which type of attack attempts to gain access by trying many possible password combinations?<\/b><\/p>\n

          \n
        1. Brute-force attack<\/span><\/li>\n
        2. Phishing attack<\/span><\/li>\n
        3. DDoS attack<\/span><\/li>\n
        4. Tailgating<\/span><\/li>\n<\/ol>\n

          Correct Answer: 1<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          A brute-force attack attempts to discover a password by systematically trying many possible combinations until the correct one is found. Strong password policies, account lockout mechanisms, rate limiting, and multifactor authentication can make brute-force attacks more difficult. Organizations should also monitor authentication logs for repeated failed login attempts.<\/span><\/p>\n

          Question 45<\/b><\/h3>\n

          Which security solution provides centralized collection and analysis of security-related events from multiple systems?<\/b><\/p>\n

            \n
          1. SIEM<\/span><\/li>\n
          2. VPN<\/span><\/li>\n
          3. NAC<\/span><\/li>\n
          4. HSM<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            A security information and event management (SIEM) system collects and analyzes logs and security events from multiple sources such as servers, firewalls, applications, and endpoints. SIEM platforms can correlate events to identify suspicious patterns and provide alerts to security personnel. They also support investigation, monitoring, and compliance requirements.<\/span><\/p>\n

            Question 46<\/b><\/h3>\n

            Which technology controls network access by checking the security posture of a device before allowing it to connect?<\/b><\/p>\n

              \n
            1. NAC<\/span><\/li>\n
            2. DNS<\/span><\/li>\n
            3. NAT<\/span><\/li>\n
            4. RAID<\/span><\/li>\n<\/ol>\n

              Correct Answer: 1<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              Network access control (NAC) evaluates devices before or during network access based on defined security requirements. For example, NAC may verify whether a device has current security updates, approved antivirus software, or an appropriate configuration. Noncompliant devices can be denied access or placed into a restricted network segment.<\/span><\/p>\n

              Question 47<\/b><\/h3>\n

              Which type of attack uses fraudulent emails or messages to persuade a specific individual to provide confidential information?<\/b><\/p>\n

                \n
              1. Spear phishing<\/span><\/li>\n
              2. Wardriving<\/span><\/li>\n
              3. Bluejacking<\/span><\/li>\n
              4. Dumpster diving<\/span><\/li>\n<\/ol>\n

                Correct Answer: 1<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                Spear phishing is a targeted form of phishing directed at a specific individual or organization. Attackers often research their targets before creating convincing messages that appear to come from trusted sources. The objective may be to steal credentials, deliver malware, obtain sensitive information, or convince the victim to perform an unauthorized action.<\/span><\/p>\n

                Question 48<\/b><\/h3>\n

                Which security principle requires an organization to use multiple layers of protection against threats?<\/b><\/p>\n

                  \n
                1. Defense in depth<\/span><\/li>\n
                2. Least privilege<\/span><\/li>\n
                3. Separation of duties<\/span><\/li>\n
                4. Single sign-on<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 1<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  Defense in depth uses multiple security controls so that the failure of one control does not automatically result in a successful compromise. An organization might combine firewalls, endpoint protection, access controls, encryption, monitoring, and security awareness training. This layered approach increases the difficulty of successfully attacking a system or network.<\/span><\/p>\n

                  Question 49<\/b><\/h3>\n

                  Which type of malware disguises itself as legitimate software to trick a user into installing it?<\/b><\/p>\n

                    \n
                  1. Trojan<\/span><\/li>\n
                  2. Worm<\/span><\/li>\n
                  3. Virus<\/span><\/li>\n
                  4. Adware<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 1<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    A Trojan is malicious software that disguises itself as a legitimate application or file. Unlike a worm, a Trojan does not typically spread by automatically replicating itself. Attackers may use Trojans to establish unauthorized access, steal information, install additional malware, or perform other malicious activities after the user executes the program.<\/span><\/p>\n

                    Question 50<\/b><\/h3>\n

                    Which security technology can isolate a compromised endpoint from the network while allowing security personnel to investigate it?<\/b><\/p>\n

                      \n
                    1. EDR<\/span><\/li>\n
                    2. DHCP<\/span><\/li>\n
                    3. DNS<\/span><\/li>\n
                    4. RAID<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 1<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      Endpoint detection and response (EDR) solutions continuously monitor endpoint activity and can detect suspicious behavior. Many EDR platforms provide response capabilities such as isolating a compromised endpoint from the network while maintaining management connectivity for investigation. This can help security teams contain threats and prevent an attacker from moving further through the environment.<\/span><\/p>\n

                      Question 51<\/b><\/h3>\n

                      Which type of attack attempts to exploit a previously unknown vulnerability in software?<\/b><\/p>\n

                        \n
                      1. Zero-day attack<\/span><\/li>\n
                      2. Password spraying<\/span><\/li>\n
                      3. Phishing<\/span><\/li>\n
                      4. Replay attack<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 1<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        A zero-day attack exploits a vulnerability that is unknown to the vendor or for which no effective patch is yet available. Because defenders may not have had time to develop protections, zero-day vulnerabilities can present significant security risks. Organizations can reduce exposure through layered security controls, application monitoring, threat intelligence, and timely security updates when patches become available.<\/span><\/p>\n

                        Question 52<\/b><\/h3>\n

                        Which access control model assigns permissions based on a user’s job responsibilities within an organization?<\/b><\/p>\n

                          \n
                        1. Role-based access control<\/span><\/li>\n
                        2. Discretionary access control<\/span><\/li>\n
                        3. Rule-based access control<\/span><\/li>\n
                        4. Attribute-based access control<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 1<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          Role-based access control (RBAC) assigns permissions according to predefined organizational roles. Instead of assigning every permission individually, administrators create roles such as administrator, manager, or employee and assign appropriate permissions to each role. Users then receive access based on the roles assigned to them, simplifying permission management.<\/span><\/p>\n

                          Question 53<\/b><\/h3>\n

                          Which security technique replaces sensitive data with a randomly generated value that has no meaningful value outside the authorized system?<\/b><\/p>\n

                            \n
                          1. Tokenization<\/span><\/li>\n
                          2. Hashing<\/span><\/li>\n
                          3. Encryption<\/span><\/li>\n
                          4. Encoding<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            Tokenization replaces sensitive information with a token that can be used as a substitute for the original data. The token itself generally does not contain the original information and has little value if exposed outside the system that manages the token mapping. Tokenization is commonly used to reduce exposure of sensitive payment and personal information.<\/span><\/p>\n

                            Question 54<\/b><\/h3>\n

                            Which type of social engineering attack involves an attacker creating a fabricated scenario to persuade a victim to reveal information?<\/b><\/p>\n

                              \n
                            1. Pretexting<\/span><\/li>\n
                            2. Tailgating<\/span><\/li>\n
                            3. Shoulder surfing<\/span><\/li>\n
                            4. Dumpster diving<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 1<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              Pretexting occurs when an attacker creates a believable story or scenario to manipulate a victim into providing information or performing an action. For example, an attacker might pretend to be a member of the IT department and request account details. Security awareness training and verification procedures can help employees recognize and resist pretexting attempts.<\/span><\/p>\n

                              Question 55<\/b><\/h3>\n

                              Which cryptographic technology uses a public key and a private key for secure communication?<\/b><\/p>\n

                                \n
                              1. Symmetric encryption<\/span><\/li>\n
                              2. Asymmetric encryption<\/span><\/li>\n
                              3. Hashing<\/span><\/li>\n
                              4. Data masking<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 2<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                Asymmetric encryption uses a mathematically related public key and private key. The public key can be distributed openly, while the private key must be protected by its owner. Asymmetric cryptography is commonly used for secure key exchange, digital signatures, and establishing secure communications. It generally requires more computational resources than symmetric encryption.<\/span><\/p>\n

                                Question 56<\/b><\/h3>\n

                                Which type of vulnerability occurs when two processes access shared resources in an unexpected sequence?<\/b><\/p>\n

                                  \n
                                1. Race condition<\/span><\/li>\n
                                2. Buffer overflow<\/span><\/li>\n
                                3. SQL injection<\/span><\/li>\n
                                4. Cross-site scripting<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 1<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  A race condition occurs when the outcome of an operation depends on the timing or sequence of events involving multiple processes or threads. Attackers may attempt to exploit this condition to bypass security controls or manipulate shared resources. Secure synchronization mechanisms and proper programming practices can help prevent race conditions.<\/span><\/p>\n

                                  Question 57<\/b><\/h3>\n

                                  Which attack attempts to use valid credentials obtained from one breached service to access accounts on other services?<\/b><\/p>\n

                                    \n
                                  1. Credential stuffing<\/span><\/li>\n
                                  2. Password spraying<\/span><\/li>\n
                                  3. Brute-force attack<\/span><\/li>\n
                                  4. Dictionary attack<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 1<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    Credential stuffing uses previously compromised usernames and passwords to attempt authentication against other systems. This attack takes advantage of password reuse across different services. Multifactor authentication, unique passwords, breached-credential monitoring, and rate-limiting controls can significantly reduce the effectiveness of credential stuffing.<\/span><\/p>\n

                                    Question 58<\/b><\/h3>\n

                                    Which security control is primarily used to protect sensitive data stored on a lost or stolen laptop?<\/b><\/p>\n

                                      \n
                                    1. Full-disk encryption<\/span><\/li>\n
                                    2. Network segmentation<\/span><\/li>\n
                                    3. Web filtering<\/span><\/li>\n
                                    4. Intrusion detection<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 1<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      Full-disk encryption protects data stored on a device by encrypting the contents of the storage drive. If a laptop is lost or stolen, an unauthorized person generally cannot access the protected data without the required authentication or encryption key. Full-disk encryption is especially important for mobile devices that may contain sensitive organizational information.<\/span><\/p>\n

                                      Question 59<\/b><\/h3>\n

                                      Which type of attack attempts to access a wireless network by discovering and exploiting available wireless signals?<\/b><\/p>\n

                                        \n
                                      1. Wardriving<\/span><\/li>\n
                                      2. Phishing<\/span><\/li>\n
                                      3. Pharming<\/span><\/li>\n
                                      4. Smishing<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 1<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        Wardriving involves searching for wireless networks while moving through a geographic area, often using a vehicle or portable device. Attackers may identify wireless networks, determine their security configurations, and look for opportunities to gain unauthorized access. Organizations can reduce wireless risks through strong encryption, secure authentication, appropriate access points, and proper wireless configuration.<\/span><\/p>\n

                                        Question 60<\/b><\/h3>\n

                                        Which incident response phase focuses on stopping the spread of a security incident and limiting its impact?<\/b><\/p>\n

                                          \n
                                        1. Recovery<\/span><\/li>\n
                                        2. Containment<\/span><\/li>\n
                                        3. Lessons learned<\/span><\/li>\n
                                        4. Preparation<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 2<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          Containment is the incident response phase focused on limiting the scope and impact of an ongoing security incident. Actions may include isolating compromised systems, disabling affected accounts, blocking malicious network traffic, or separating affected network segments. Effective containment helps prevent an attacker or malware from spreading while the security team investigates and removes the underlying threat.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full\u00a0CompTIA SY0-701 Exam Dumps\u00a0and Practice Test Dumps.   Question 41 Which security control is designed to prevent unauthorized physical access to a restricted area? Firewall Mantrap Encryption Intrusion prevention system Correct Answer: 2 Explanation A mantrap is a physical security control that uses two or more interlocking doors to control access to a restricted […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11463"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=11463"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11463\/revisions"}],"predecessor-version":[{"id":11464,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11463\/revisions\/11464"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=11463"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=11463"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=11463"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}